Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/0b0007-d30a-4994-ab00-bd5b4e54712b/1/k89OeSfhBJZOTJb0QWSc40F0zjo.mft
File: k89OeSfhBJZOTJb0QWSc40F0zjo.mft (raw, json)
Hash identifier: ZmxJOFuShk5oEg3o36yl1p/StrYPCwyIbi/vaXhjI/Q=
Subject key identifier: 4B:C0:69:8E:35:23:B2:4D:CB:76:22:35:E6:91:31:39:E5:E2:70:B2
Authority key identifier: 93:CF:4E:79:27:E1:04:96:4E:4C:96:F4:41:64:9C:E3:41:74:CE:3A
Certificate issuer: /CN=93cf4e7927e104964e4c96f441649ce34174ce3a
Certificate serial: 0199FD6AF0C47E9D634F97E30E0D36E42B20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k89OeSfhBJZOTJb0QWSc40F0zjo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/0b0007-d30a-4994-ab00-bd5b4e54712b/1/k89OeSfhBJZOTJb0QWSc40F0zjo.mft
Manifest number: 16E0
Signing time: Sun 19 Oct 2025 17:01:08 +0000
Manifest this update: Sun 19 Oct 2025 17:01:08 +0000
Manifest next update: Mon 20 Oct 2025 17:01:08 +0000
Files and hashes: 1: DVEsULbgc1uy6V52nNRIcIhepiA.roa (hash: XNV6aUJyGeh2Aa9mxZ1t5TwCl8DNIg+I/K5KbgR9/Ys=)
2: k89OeSfhBJZOTJb0QWSc40F0zjo.crl (hash: zwvBxJO1wIu968wrxQsu8rJI1DE2RNEq/z0yPwZLHy0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/0b0007-d30a-4994-ab00-bd5b4e54712b/1/k89OeSfhBJZOTJb0QWSc40F0zjo.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/0b0007-d30a-4994-ab00-bd5b4e54712b/1/k89OeSfhBJZOTJb0QWSc40F0zjo.mft
rsync://rpki.ripe.net/repository/DEFAULT/k89OeSfhBJZOTJb0QWSc40F0zjo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6a:f0:c4:7e:9d:63:4f:97:e3:0e:0d:36:e4:2b:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93cf4e7927e104964e4c96f441649ce34174ce3a
Validity
Not Before: Oct 19 17:01:08 2025 GMT
Not After : Oct 20 17:01:08 2025 GMT
Subject: CN=4bc0698e3523b24dcb762235e6913139e5e270b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:56:1c:2c:b3:9a:42:a9:2c:9f:67:c2:38:e0:
4f:c4:51:1e:56:3c:dc:a9:6b:05:eb:17:0e:4f:58:
f1:7c:b2:e6:c4:0b:e6:08:29:2f:d4:87:ae:8f:58:
26:a2:6a:80:4d:f8:a3:8a:ba:ce:e6:e5:5e:f4:a4:
73:47:a3:1c:d4:f0:0d:2c:2d:fd:9a:f3:99:67:c2:
5e:58:06:8f:5f:7e:3d:21:b2:5a:79:91:74:08:d2:
17:a5:a6:8e:5d:bb:9b:50:17:b5:1f:e6:92:51:83:
e0:c7:3c:7d:d0:ff:1c:cb:83:4c:8d:d0:2e:cb:00:
9d:c9:7d:3c:b7:a3:ba:8c:42:95:56:a6:02:9f:80:
d6:ec:09:6f:af:63:af:c2:ce:ab:90:d4:b3:eb:50:
fc:e4:c7:19:d0:d7:05:b1:5e:50:64:58:ce:d3:88:
df:a7:f5:c8:cc:4c:1f:ad:ef:9f:f5:b4:18:16:83:
73:d9:a0:af:08:c2:bd:31:56:1a:52:eb:9f:5d:88:
b3:bc:a4:b6:5b:ac:30:db:e7:70:89:c5:ea:ba:b3:
4c:62:04:26:35:1b:f1:b6:61:8c:ad:eb:1e:59:69:
94:fc:07:23:5e:47:8d:c1:8c:f9:a1:6b:1d:41:6a:
f7:5a:4d:ee:4b:4b:25:ef:03:aa:15:11:3d:fe:ec:
82:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:C0:69:8E:35:23:B2:4D:CB:76:22:35:E6:91:31:39:E5:E2:70:B2
X509v3 Authority Key Identifier:
keyid:93:CF:4E:79:27:E1:04:96:4E:4C:96:F4:41:64:9C:E3:41:74:CE:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k89OeSfhBJZOTJb0QWSc40F0zjo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/0b0007-d30a-4994-ab00-bd5b4e54712b/1/k89OeSfhBJZOTJb0QWSc40F0zjo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/0b0007-d30a-4994-ab00-bd5b4e54712b/1/k89OeSfhBJZOTJb0QWSc40F0zjo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:dd:0d:e3:e7:19:b2:4d:9e:c6:f5:c4:8b:1e:53:4c:78:2e:
0e:13:24:b6:c5:2c:c1:8a:47:48:1c:e2:b3:f2:cd:c1:6a:9e:
b9:03:fe:50:4c:f9:0c:f9:13:13:09:77:31:0f:18:04:eb:5b:
ae:01:6d:0e:f5:09:f4:bb:55:a6:1b:4b:08:4b:5a:24:73:b9:
67:03:3c:54:8c:c1:75:2a:69:c1:e2:13:2f:88:b4:e6:3f:3d:
1d:85:38:0d:72:89:ca:9b:a4:42:f6:c7:25:bb:ee:59:5f:b6:
45:bf:3f:b2:72:a2:ad:96:53:f8:13:0e:12:0a:79:9e:52:41:
95:eb:06:6b:e2:4b:13:0e:20:bd:ce:5b:62:9c:64:b1:d0:17:
ff:01:47:12:45:b3:86:e0:4c:ec:b3:02:43:3a:14:bb:ba:be:
35:a4:1c:4c:93:22:91:9f:74:90:21:8a:52:62:d6:6a:dc:1a:
1e:6b:be:12:c7:6d:71:04:35:70:7d:96:43:1a:cf:9d:a1:17:
49:96:66:e4:ad:e1:2b:1f:13:df:99:95:1f:7d:5f:a9:f6:5f:
01:ab:86:17:3d:9c:40:d0:dd:27:22:25:9f:10:fb:03:32:aa:
5d:b8:34:e9:0c:1d:2c:a5:93:40:6f:08:d5:60:d8:c4:07:30:
02:41:7c:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn9avDEfp1jT5fjDg025CsgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzY2Y0ZTc5MjdlMTA0OTY0ZTRjOTZmNDQxNjQ5Y2UzNDE3
NGNlM2EwHhcNMjUxMDE5MTcwMTA4WhcNMjUxMDIwMTcwMTA4WjAzMTEwLwYDVQQD
Eyg0YmMwNjk4ZTM1MjNiMjRkY2I3NjIyMzVlNjkxMzEzOWU1ZTI3MGIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9lYcLLOaQqksn2fCOOBPxFEeVjzc
qWsF6xcOT1jxfLLmxAvmCCkv1Ieuj1gmomqATfijirrO5uVe9KRzR6Mc1PANLC39
mvOZZ8JeWAaPX349IbJaeZF0CNIXpaaOXbubUBe1H+aSUYPgxzx90P8cy4NMjdAu
ywCdyX08t6O6jEKVVqYCn4DW7Alvr2Ovws6rkNSz61D85McZ0NcFsV5QZFjO04jf
p/XIzEwfre+f9bQYFoNz2aCvCMK9MVYaUuufXYizvKS2W6ww2+dwicXqurNMYgQm
NRvxtmGMreseWWmU/AcjXkeNwYz5oWsdQWr3Wk3uS0sl7wOqFRE9/uyCzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEvAaY41I7JNy3YiNeaRMTnl4nCyMB8GA1UdIwQY
MBaAFJPPTnkn4QSWTkyW9EFknONBdM46MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazg5T2VTZmhCSlpPVEpiMFFXU2M0MEYwempvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni8wYjAwMDctZDMwYS00OTk0LWFiMDAt
YmQ1YjRlNTQ3MTJiLzEvazg5T2VTZmhCSlpPVEpiMFFXU2M0MEYwempvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni8wYjAwMDctZDMwYS00OTk0LWFiMDAtYmQ1YjRlNTQ3MTJi
LzEvazg5T2VTZmhCSlpPVEpiMFFXU2M0MEYwempvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaN0N4+cZ
sk2exvXEix5TTHguDhMktsUswYpHSBzis/LNwWqeuQP+UEz5DPkTEwl3MQ8YBOtb
rgFtDvUJ9LtVphtLCEtaJHO5ZwM8VIzBdSppweITL4i05j89HYU4DXKJypukQvbH
JbvuWV+2Rb8/snKirZZT+BMOEgp5nlJBlesGa+JLEw4gvc5bYpxksdAX/wFHEkWz
huBM7LMCQzoUu7q+NaQcTJMikZ90kCGKUmLWatwaHmu+EsdtcQQ1cH2WQxrPnaEX
SZZm5K3hKx8T35mVH31fqfZfAauGFz2cQNDdJyIlnxD7AzKqXbg06QwdLKWTQG8I
1WDYxAcwAkF8dw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:43:08 2025 by rpki-client